SI-7(1) Integrity Checks
Control enhancement of SI-7 Software, Firmware, and Information Integrity
Control
Perform an integrity check of [Assignment: organization-defined software, firmware, and information] [Assignment: Selection (one-or-more): at startup | at [si-7.1_prm_3] | [si-7.1_prm_4] ].
Discussion
Security-relevant events include the identification of new threats to which organizational systems are susceptible and the installation of new hardware, software, or firmware. Transitional states include system startup, restart, shutdown, and abort.
Need SI-7(1) implemented and evidenced?
We assess where you stand against this control, document the gap, and build the remediation plan your auditor and your board will both accept.
Control catalog and framework text on this page is reproduced from official NIST publications — a public-domain work of the U.S. Government (17 U.S.C. §105). Maverc commentary, groupings, and readiness guidance are our own and are not part of any NIST publication.